23264 matches found
CVE-2026-42766 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-42765 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-42764 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-34182 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-34181 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-34180 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-45446 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-34183 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-Q98X-73C3-57GJ vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-F684-CPCQ-J565 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-4JGC-CJ59-F9MM vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-7383 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-7PHF-QPM5-Q6P3 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
Important: Red Hat Security Advisory: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an...
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application ...
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax CMS data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key KEK cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leadin...
openssl: NULL pointer dereference in QUIC server initial packet handling
A flaw was found in the OpenSSL QUIC Quick UDP Internet Connections server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server...
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS12 Public-Key Cryptography Standards 12 files that use Password-Based Message Authentication Code 1 PBMAC1 with short HMAC Hash-based Message Authentication Code keys. This can lead to a service accepting...
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
A flaw was found in OpenSSL. The implementations of AES-SIV Advanced Encryption Standard - SIV and AES-GCM-SIV Advanced Encryption Standard - Galois/Counter Mode - SIV incorrectly process authentication tags for empty messages. This vulnerability allows a remote attacker to forge empty messages...